agents-refresh
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherent and disclosed, but it sets up scheduled refreshes that read and rewrite persistent agent memory/context files.
This appears safe for its stated purpose if you want persistent memory maintenance. Before installing, make sure the listed AGENTS, IDENTITY, SOUL, USER, memory, MEMORY, and HEARTBEAT files do not contain untrusted or overly sensitive content, and confirm that you want a daily scheduled refresh.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If those local memory or identity files contain incorrect, sensitive, or poisoned content, the refresh process may carry that content into future agent context.
The skill is designed to read local instruction/profile/memory files and write persistent memory/heartbeat files, which can influence future agent behavior.
permissions: - read: ["AGENTS.md", "SOUL.md", "IDENTITY.md", "USER.md", "memory/*.md", "HEARTBEAT.md"] - write: ["MEMORY.md", "HEARTBEAT.md"]
Use this only in trusted workspaces, periodically review MEMORY.md and HEARTBEAT.md, and keep sensitive or untrusted logs out of the files being summarized.
The skill may continue refreshing and updating memory on a schedule after setup, which can affect future sessions even when the user is not actively thinking about it.
The artifact declares a recurring scheduled task, creating persistent automated behavior. It is disclosed and aligned with the skill’s purpose.
schedules:
- cron: "0 6 * * *"
task: "refresh_memory"
description: "Every morning at 6AM, distill yesterday's logs and update MEMORY.md"Install it only if you want recurring memory refreshes, and remove or disable the cron/heartbeat entries if you no longer want the behavior.